On 11/12/19 9:16 AM, Stephane Bortzmeyer wrote:
Well, now that a *lot* of Web sites are using this
technique to hide
the fact that they use 3rd-party cookies, I tend to think it is
important to have a solution.
This particular case feels like it might become just an arms-race. When
CNAMEs stop being sufficiently efficient, they can just copy the address
records into their zones - and I think some forms of automatic CNAME
flattening actually aren't too rare at large DNS hosters, though I
suppose the main motivation there is to get a CNAME at zone apex. (I
don't know how much these services are currently usable at deeper places.)
Still, I certainly don't want to dismiss the usefulness of filtering
CNAME targets, and perhaps the tracker situation will never come so far.